The lawyer is covered. The software that wrote the brief is not.Founded by a software developer who runs an AI app.
We insure legal AI and legal tech companies, whether they sell contract review and research to law firms or document help to consumers, with technology E&O that fits a wrong answer in a legal setting. A lawyer’s malpractice policy protects the lawyer and does not protect the vendor.
Tell us the situation.
One licensed human replies the same business day — not five agents, not an auto-responder. If the policy you have is already the right one, we will tell you.
We use this to quote and service your insurance, and we do not sell it or pass it to lead networks. Privacy policy.
The person placing your tech E&O runs an app with an AI coach of his own.
Kevin Kelsey
Founder | Principal Agent
Boring’s founder, Kevin Kelsey, owns and runs TrainRec, a fitness app with a built-in AI coach, and has placed insurance for AI apps. Insuring his own taught him how an underwriter reads a model. Personal guidance from an AI reads more like the work of a professional than like software, technology E&O forms commonly exclude bodily injury, and not every form will add it back. So whether your app answers money, health, hiring or farming questions, the gap between what it says and what the policy covers gets read by someone who has had to close it for his own product.
Send us what you have. We’ll tell you if it’s right.
Your current policy paperwork, a renewal notice, or nothing at all. A licensed agent reads it and replies the same business day.
What legal tech businesses actually need.
Technology E&O for legal software
Claims from a firm or a customer that your tool produced a wrong answer, a missing clause or an invented citation and it cost them a case, a deal or a sanction.
Without it — Many forms exclude professional services you give directly, or define covered services as software only, so a tool that drafts and cites like a junior lawyer may sit awkwardly inside it.
Professional liability
Covers the advice, the drawing, the diagnosis. The work itself, rather than someone getting hurt on your premises.
Without it — If your service includes review by lawyers or a consumer-facing legal opinion, a professional form may be needed beside tech E&O, and a law firm’s own malpractice policy is the one that names its lawyers, not you.
Cyber & tech E&O
Breach response, ransomware and the notification costs that follow. Technology errors and omissions sits on the same policy and covers the software or service itself failing a client, which is the half most tech companies find out about too late.
Without it — Privileged files, deal documents and client lists are held by your servers and sent to your model provider. A breach there is a confidentiality claim your law firm customers will pass to you.
Media liability
Covers claims arising from what you publish (defamation, copyright and trademark infringement, invasion of privacy and misuse of a person’s likeness) on an annual policy for creators, podcasters, publishers and authors.
Without it — Generated documents, templates and published guides can draw copyright, false advertising and unfair competition claims. Check whether the E&O form includes a media section before buying twice.
Directors & officers
Protects the personal assets of the people running the company when they are sued over a management decision. It applies to private companies and nonprofit boards, not just public ones, which is a common and expensive misunderstanding.
Without it — A regulator inquiry into AI claims, or a state bar complaint about unauthorized practice, is a claim against your leaders. Check whether regulatory response is paid.
What the regulators actually wrote down.
In Mata v. Avianca (S.D.N.Y., opinion and order on sanctions signed June 22, 2023, 678 F.Supp.3d 443) Judge P. Kevin Castel wrote that there is nothing inherently improper about using a reliable AI tool for assistance, but that existing rules impose a gatekeeping role on attorneys to ensure the accuracy of their filings, and imposed a 5,000-dollar Rule 11 sanction jointly and severally on the lawyers and their firm after they filed a brief citing cases ChatGPT had invented.
Mata v. Avianca, Inc., No. 22-cv-1461 (PKC) (S.D.N.Y. June 22, 2023), Opinion and Order on Sanctions · checked 2026-11-01
On September 25, 2024 the FTC announced a complaint against DoNotPay, alleging it marketed “the world’s first robot lawyer,” never tested whether its chatbot’s output was equal to the level of a human lawyer, and did not hire or retain any attorneys.
Federal Trade Commission, press release, FTC Announces Crackdown on Deceptive AI Claims and Schemes (September 25, 2024) · checked 2026-11-01
The FTC approved its final DoNotPay order 5-0 on January 16, 2025 and announced it on February 11, 2025; the order requires DoNotPay to pay 193,000 dollars, to notify consumers who subscribed between 2021 and 2023, and to stop claiming its service performs like a real lawyer unless it has evidence to back that up.
Federal Trade Commission, press release, FTC Finalizes Order with DoNotPay That Prohibits Deceptive “AI Lawyer” Claims (February 11, 2025) · checked 2026-11-01
The FTC’s chair said when announcing its September 2024 AI enforcement actions that there is no AI exemption from the laws on the books.
Federal Trade Commission, press release, FTC Announces Crackdown on Deceptive AI Claims and Schemes (September 25, 2024) · checked 2026-11-01
The American Bar Association’s Standing Committee on Ethics and Professional Responsibility issued Formal Opinion 512, Generative Artificial Intelligence Tools, on July 29, 2024, which the ABA announced as its first ethics guidance on a lawyer’s use of AI tools, addressing competence, confidentiality, client communication, candor to tribunals, supervision and fees. Formal opinions are persuasive and do not bind a state.
American Bar Association, Formal Opinion 512 (July 29, 2024), and ABA news release, ABA issues first ethics guidance on a lawyer’s use of AI tools · checked 2026-11-01
The claims we actually see.
Ordered by how often we see them, not by how dramatic they are. Each one names the coverage that answers it — and the policy people wrongly assume already does.
Most common
A law firm files work with a hallucinated citation from your tool
Covered by Technology E&O, if the firm sues you
The sanctions fall on the lawyer, and the firm’s malpractice policy answers its own client. The firm may then look to you under the contract, where your limit of liability and your policy meet.
Common
A consumer says your document help was legal advice from a non-lawyer
Covered by Professional liability or tech E&O, depending on the wording
Whether a product counts as practicing law is a regulator and bar question before it is a damages claim, and fines are often excluded. A policy may not pay to defend a claim that your product is itself unlawful.
Less common, severe
The FTC or a state asks whether your claims about the AI were true
Covered by Directors and officers coverage, if it pays for regulatory response
The FTC’s DoNotPay order carried a payment of 193,000 dollars and a duty to notify past subscribers. Penalties are commonly excluded, and notice costs may not be a covered loss.
Common
Privileged documents leak or reach another customer’s model
Covered by Cyber, first-party response and privacy liability
Confidentiality is the product. A breach claim from a law firm can exceed a small cyber limit, and a customer contract may require a higher one than you carry.
Common
Your contract review misses a clause and the client loses a deal
Covered by Technology E&O
Contract language usually limits your liability, but only the policy limit pays. A customer that can show gross negligence may reach past the cap.
What our legal tech clients ask us.
What will the underwriter ask a legal tech company?
Who uses the tool, lawyers or the public. Whether a lawyer reviews the output before it reaches a client or a court. Which model or vendor you use and whether you can show how a citation was produced. Your disclaimers, user count, revenue and states. Your contracts, and what they say about your liability. Whether you give consumers legal opinions, and prior claims.
Which NAICS codes does this page cover?
Software and hosting codes are 513210 Software Publishers, 541511 Custom Computer Programming Services and 518210 Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services. Legal codes include 541110 Offices of Lawyers, 541199 All Other Legal Services and 561410 Document Preparation Services.
Doesn’t the law firm’s malpractice policy cover this?
It covers the lawyers it names, for their professional services. A software company is not those lawyers, so the vendor needs its own policy. If a firm is sued over an AI error, its carrier handles the firm, and the firm may then pursue you. A malpractice policy is the firm’s page, not yours.
What happened in Mata v. Avianca?
In June 2023 a federal judge in New York sanctioned two lawyers and their firm 5,000 dollars in total after they filed a brief citing cases ChatGPT had invented. He wrote there was nothing inherently improper in using a reliable AI tool, but lawyers have a gatekeeping role to check their filings. The lesson for a vendor is that the lawyer bears the sanction and your customer may look back at you.
What did the FTC do to DoNotPay?
The FTC alleged DoNotPay sold itself as the world’s first robot lawyer without testing whether its output matched a human lawyer or hiring any attorneys. The final order, approved January 16, 2025, required a payment of 193,000 dollars, notice to past subscribers, and no more claims of lawyer-level performance without evidence. An AI legal claim is an advertising claim the FTC can enforce.
Is a consumer legal document app practicing law?
That is a state-by-state question for a lawyer, and we do not answer it. What matters to the insurance application is that a consumer app which gives personal legal conclusions reads more like a professional than like software, in our experience placing AI apps, and each state decides what counts as practicing law. Say plainly what your app does and does not decide.
What did the ABA say about lawyers using generative AI?
In Formal Opinion 512 of July 29, 2024, the ABA’s ethics committee addressed lawyers’ duties of competence, confidentiality, client communication, candor to courts, supervision and fees when using generative AI. Opinions like that are persuasive, not binding. For a vendor, they describe the questions your law firm customers will ask you before they buy.
Does the policy cover wrong AI output, or exclude it?
It depends on the form, and some 2026 forms carry generative AI exclusions or limits. For a legal tool the hallucinated citation is the product failing, so you want AI output named inside covered services. Ask in writing, and keep the logs that show a human was told to check.
Do disclaimers like “not legal advice” protect us?
They help the defense and do not decide it. The FTC order shows that what you say about your AI can itself be the violation. Keep disclaimers truthful, show a human check where you claim one, and keep the insurance, because defense costs arrive either way.
Our customer is a law firm that wants us to indemnify it. What do we check?
What the indemnity covers, and whether your policy pays for it. Law firm contracts often ask you to defend the firm against claims arising from your tool, including sanctions. Tech E&O may not pay liability assumed only by contract. Send us the agreement before you sign it.
Is there a page for the law firms that use our tool?
Yes. A firm using your tool carries its own policies, and its malpractice, cyber and crime needs are on the law firm page. Share it with a firm customer who asks what coverage they should have.
Our app was built with an AI coding tool. Does that matter?
It changes the underwriter’s questions on security and review, not who answers a claim. Privileged documents make a leak serious, so be ready to say how the code was reviewed before real users arrived.
We serve clients outside the US. Does the insurance follow?
Not automatically. Many tech E&O policies only promise to defend claims brought in the US or Canada, and legal rules on who may give legal advice differ everywhere. Tell the insurer which countries your users are in.
How does this compare with the fitness app page?
Same argument, different harm. A fitness app can injure a body, so it needs contingent bodily injury, the grant for harm someone says came from relying on your output. A legal tool loses cases and money, which tech E&O is built for if the wording allows it. The flagship page explains the original.
What about injury claims?
Legal tech rarely has them, but if the app gives safety or health guidance too, ask for contingent bodily injury by name. The guide explains how the grant works and why tech E&O forms commonly exclude bodily injury.
Where do the other AI app industries sit?
Finance, insurance, hiring and health apps each have their own page and their own policy fight. The hub lists them all.
Guides on legal tech.
- Insurance for an App Launching WorldwideAn app store launch puts your app in front of users in dozens of countries on the first day. Your tech E&O may only defend claims filed in the US or Canada, and your cyber policy has to handle European privacy rules, where health and fitness readings are a special category of data.
- Vibe-Coded App InsuranceA vibe-coded app carries the same liability as any other, and the documented failures are security ones: open databases, exposed keys and an agent that deleted data. Here is which policy answers which failure, what the AI tool providers say about who is responsible, and what to check before you buy.
Commercial insurance is 96% of what we do — it is not a department here, it is the whole business. Not ready to talk? The guides answer the questions this page raises in more depth. Already insured with us and need a certificate or a policy change? Ask the service team rather than starting a quote — it is faster and it goes to the people whose job it is. We also write home and auto, which is usually cheaper alongside the business policy than apart from it.
Handed a lease, a vendor packet or a client contract with insurance requirements? Paste it into the COI Requirements Decoder to see what each one means for your business, or read what the requirements mean.